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ABSTRACT : 

An access control technique to limit access to 
information content such as 

available on the Internet. The technique is 
implemented within a network 

device such as a proxy server, router, switch, 
firewall, bridge or other 

network gateway. The access control process 
analyzes data in each request from 

the clients and determines if the request should be 
forwarded for processing by 

a server to which it is destined. Access control 
may be determined by 

comparing client source information against a 
database of Uniform Resource 
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Locators (URLs), IP addresses, or other resource 
identification data specifying 

the data requested by the client. The invention 
therefore provides access 

control not based only upon content, but rather, 
based primarily upon the 

identity of the computers or users making the 

requests. The technique further 

avoids the problems of the prior art which 

categories or filters the content of 

only web pages based solely upon objectionable 

words. This is becauase a 

category database is used by the network device to 
control access and is 

created via a process involving human editors who 
assist in the creation and 
maintenance of the category database. 
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Detailed Description Text - DETX (29) : 

In the www.xxx.com example, step 154 may obtain, 
for example, a page or 

meta-description of the entire web site that may 
look something like 

"www.xxx.com is an adult oriented site supplying 
pornographic images to web 

browsers." In the Multicast example, whois may 
return "1244.0.0.0 is an 

internet Multicast channel served from a SUN 
Workstation at XYZ Corporation and 

is dedicated to providing real-time audio and video 
information on religious 
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activities." This description is saved in step 154, 
since it may be relevant 

for determining the category of the web site or 
content server, which in the 

first case is sexual material, and in the later 
case is religious material. 



Detailed Description Text - DETX (48) : 

In this manner, the present invention provides a 
robust data access 

filtering system that provides access control based 
on users, categories and 

times of use and not purely on content of data 
being accessed. This is 

beneficial since content filtering alone often 
overlooks objectionable material 

such as pornographic images, which contain no words 
to content filter upon. 
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